<?php defined('C5_EXECUTE') or die("Access Denied."); $form = Loader::helper('form'); $tp = new TaskPermission(); Loader::model('attribute/categories/user'); $attribs = UserAttributeKey::getEditableList(); $sk = PermissionKey::getByHandle('access_user_search'); $ek = PermissionKey::getByHandle('edit_user_properties'); $tp = new TaskPermission(); if (!$tp->canEditUserProperties()) { die(t("Access Denied.")); } $users = array(); if (is_array($_REQUEST['uID'])) { foreach ($_REQUEST['uID'] as $uID) { $ui = UserInfo::getByID($uID); $users[] = $ui; } } foreach ($users as $ui) { if (!$sk->validate($ui)) { die(t("Access Denied.")); } } if ($_POST['task'] == 'update_extended_attribute') { $fakID = $_REQUEST['fakID']; $value = ''; $ak = UserAttributeKey::get($fakID); foreach ($users as $ui) { if ($ek->validate($ak)) {